Experts at Doctor Web have identified a new click-fraud trojan, Trojan.ChimeraWire, which disguises itself as the activity of a real user and artificially boosts website engagement metrics in search results. Infected Windows machines automatically...
The financially motivated group Storm-0249, long known as a broker of initial access for ransomware operators, has markedly refined its tradecraft, triggering a new wave of alarm among cybersecurity professionals. Analysts at ReliaQuest have...
A newly discovered vulnerability in Node.js, designated CVE-2025-55182 and informally dubbed React2Shell, has become a favored weapon of botnets within mere days of its disclosure. Operators are now launching widespread attacks against vulnerable web...
The widow of Saudi dissident journalist Jamal Khashoggi has filed a complaint with the French prosecutor’s office, alleging that her phone was infected with Israeli spyware shortly before her husband’s murder. Hanan Elatr Khashoggi...
Researchers from Howler Cell have detailed an underground marketplace for compromised websites operated by students and freelancers across Asia. At the center of their latest report is a cybersecurity student from Bangladesh who aspires...
The launch of the IPCola service on underground forums in 2023 initially appeared to be yet another proxy marketplace, but the scale of the advertised address pool and the origins of its traffic quickly...
The Iranian threat group MuddyWater has intensified its cyber-espionage operations with the deployment of a new malicious program known as UDPGangster. According to Fortinet’s FortiGuard Labs, the attacks targeted Turkey, Israel, and Azerbaijan. The...
The world’s largest technology companies have begun issuing notifications to users who may have been targeted by state-linked spyware. Apple and Google report that, in recent days, they have dispatched a new wave of...
Researchers at Striker STAR Labs have detailed a new attack against agent-based browsers that can turn an ordinary email in a user’s inbox into an almost complete Google Drive wiper. The target is Comet...
The new malicious distribution tool GhostFrame has spread with remarkable speed throughout the cybercriminal ecosystem, becoming the source of more than one million phishing attacks. Its emergence has drawn the close attention of security...
At the end of November, a team of bug hunters uncovered an infection chain that began with a seemingly harmless GitHub repository. Masquerading as a Visual Studio Code project, it concealed VBScript files linked...
Chinese cyber-espionage actors have spent years burrowed, undetected, within the networks of critical organizations, infiltrating infrastructure with sophisticated malware and exfiltrating sensitive data, government agencies and private researchers warn. According to a joint advisory...
